A containerd shim is, in the usual case, an undramatic piece of software. It receives a few RPC calls from containerd, …
Some weeks back I was looking at the seccomp profile that had shipped, alongside one of our services, into production, …
Modern sandboxing arranges itself, if one steps back a few paces, on a rough spectrum. At one end sits the container, a …
The shell one-liner, which twenty years ago required a trip to Usenet and the confidence of a stranger, is now produced …
A compiler, asked to produce an object file from three lines of assembly, will produce a good deal more besides. It will …
1 One of the minor peculiarities of writing about systems software in the present era is the Tour of the Sandbox. One …
A few days ago I began writing a toy version of gVisor — Google’s userspace kernel — as a way of discovering, in …
There is a particular kind of understanding that only comes from building a thing yourself — not reading about it, not …
I built a container runtime. Not a wrapper around runc, not a shim that delegates to someone else’s code — an …
I wanted a simple way to browse classical music from the terminal. The OpenOpus API is free, doesn’t require a …
I’ve been building SmartCDN built entirely on Cloudflare Workers. It is an interesting project to learn edge …
I recently spent some time building this thing called PumpGuard. The idea was simple - monitor pump.fun in real-time to …
I’ve been curious about how BitTorrent works under the hood. I download files from other peers, but how does that …
I’ve been working on a personal sql project like a monk scribbling on a scroll: 120k deities, 150k heroes, 1.5M quests, …
I spent past few days setting up a Kubernetes project Finance Dashboard and this post is the curtain fall of a useful …
I recently updated an older Rust project (termdex, a terminal-based Pokédex) to use the latest package versions. …
How can you make your python server fast? One method is through using the Linux system call epoll. Epoll is an I/O event …